PT-2026-24811 · Undefined · Undefined

Published 2026-03-11 · Updated 2026-03-16 · CVE-2025-20435

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Android phones with MediaTek chips (affected versions not specified)

Description A flaw exists in MediaTek chips that could allow attackers to steal cryptocurrency. The attack requires physical access to the device and a USB cable. Attackers can extract PINs and seed phrases from popular wallets, such as Trust Wallet, Kraken Wallet, and Phantom, in under 45 seconds, without needing malware, internet access, or a password. Approximately 875 million Android devices are potentially affected. The vulnerability allows attackers to bypass the operating system's security measures and access sensitive data. The vulnerability affects the transport layer of the device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2025-20435

Affected Products

Undefined

References · 7

• https://twitter.com/Ledger/status/2032466333745484093 · Twitter Post
• https://twitter.com/P3b7_/status/2031753543997063364 · Twitter Post
• https://reddit.com/r/NOTHING/comments/1rsgbc3/security_cve202620435_critical_mediatek · Reddit Post
• https://twitter.com/geeknik/status/2033396559501566403 · Twitter Post
• https://reddit.com/r/NothingTech/comments/1rsgcla/security_cve202620435_critical_mediatek · Reddit Post
• https://twitter.com/CCNCitizens/status/2032038367936840036 · Twitter Post
• https://twitter.com/The_NewsCrypto/status/2031984625547907520 · Twitter Post